CVE-2019-8591

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.

Affected

Apple · iOS · macOS · tvOS · watchOS

CVSS v3.1 NVD

7.1 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CVSS v2.0 NVD

8.8 HIGHAV:N/AC:M/Au:N/C:N/I:C/A:C

EPSS

4.44% chance of exploitation in the next 30 days, 91st percentile

Published

2019-12-18

Updated

2024-08-04

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/46891

Security advisories

• https://support.apple.com/HT210118
• https://support.apple.com/HT210119
• https://support.apple.com/HT210120
• https://support.apple.com/HT210122

References

• CVE Record
• NVD entry